CVE-2017-17893

概要

参考情報

• d4wner/Vulnerabilities-Report · Exploit

readymade video sharing script のその他の脆弱性

• CVE-2017-17892緊急 9.8Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the search_video.php search parameter.
• CVE-2017-17891高 8.8Readymade Video Sharing Script has CSRF via user-profile-edit.php.
• CVE-2017-17649中 6.1Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter.
• CVE-2017-17627緊急 9.8Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.